Well, if johannes really have a rootkit installed, it may be hiding from netstat, ps etc. So I'd suggest him to boot from a livecd and run chkrootkit.
I ran chkrootkit from a Knoppix-CD, reproting nothing.After the reboot, naturally, the funny connections, or the note thereof, have disappeared.
Thanks again, I learned a lot, Johannes